Cybersecurity Strategy & Compliance Advisor-Public Trust Clearance required
Job Title
Key Responsibilities
Required Qualifications
Preferred Qualifications
Compensation & Benefits
About the Role
- Cybersecurity Strategy & Governance
- Governance, Risk & Compliance (GRC)
- Continuous Monitoring & Authorization
- Stakeholder Engagement
The Cybersecurity Strategy & Compliance Advisor serves as a trusted advisor to executive leadership, supporting the development, implementation, and maturation of enterprise cybersecurity governance, risk management, and compliance (GRC) programs. This role provides strategic guidance on federal cybersecurity policies, emerging regulations, executive directives, and security frameworks while ensuring alignment between cybersecurity initiatives and organizational business objectives.
- Advise executive leadership and cybersecurity management on enterprise security strategy, governance, and risk management initiatives.
- Align cybersecurity programs with organizational mission objectives, business priorities, and operational requirements.
- Support the maturation of cybersecurity governance programs, policies, standards, and procedures.
- Provide strategic guidance to Cybersecurity Strategy Center initiatives and cross-functional governance activities.
- Develop executive-level briefings, strategic recommendations, and cybersecurity roadmaps.
- Lead and support Governance, Risk, and Compliance (GRC) activities across the enterprise.
- Develop, review, and maintain cybersecurity and privacy policies aligned with federal requirements.
- Interpret and operationalize Executive Orders, Office of Management and Budget (OMB) memoranda, CISA directives, NIST guidance, and other federal cybersecurity mandates.
- Ensure organizational compliance with:
- Federal Information Security Modernization Act (FISMA)
- NIST Risk Management Framework (RMF)
- NIST SP 800-53, 800-37, and related publications
- Zero Trust Architecture
- Information Security Continuous Monitoring (ISCM)
- FedRAMP and cloud security authorization processes
- Support third-party risk management and supply chain security initiatives.
- Identify opportunities to automate compliance monitoring, evidence collection, and reporting activities.
- Advise on Artificial Intelligence (AI) governance, security guardrails, and responsible AI implementation.
- Assess cybersecurity impacts of new technologies and recommend appropriate security controls.
- Support modernization of Authorization to Operate (ATO) and continuous monitoring processes.
- Develop strategies to automate security control assessments using NIST SP 800-53 controls.
- Define technical controls suitable for automated assessment and continuous validation.
- Evaluate security data sources including SIEM, endpoint detection, vulnerability management, and cloud security tools to improve continuous compliance monitoring.
- Develop automated risk thresholds, monitoring criteria, and reporting mechanisms to support ongoing authorization.
- Support alignment with FedRAMP 20X modernization initiatives and evolving federal cloud authorization requirements.
- Research and provide recommendations for continuous monitoring of Artificial Intelligence systems consistent with Information Security Continuous Monitoring (ISCM) standards.
- Evaluate automated monitoring solutions to identify anomalies, measure security performance, and improve organizational cyber resilience.
- Conduct cybersecurity education, awareness, communication, and outreach activities.
- Collaborate with executive leadership, technical teams, compliance organizations, and external stakeholders.
- Present complex cybersecurity concepts to technical and non-technical audiences.
- Facilitate governance meetings, working groups, and strategic planning sessions.
The ideal candidate possesses extensive experience advising Chief Information Security Officers (CISOs) and senior executives, interpreting Executive Orders and federal cybersecurity mandates, and translating complex regulatory requirements into practical governance, security, and compliance strategies. This individual will play a key role in advancing Zero Trust initiatives, continuous monitoring capabilities, AI governance, and enterprise risk management across the organization.
About the Role
The Cybersecurity Strategy & Compliance Advisor serves as a trusted advisor to executive leadership, supporting the development, implementation, and maturation of enterprise cybersecurity governance, risk management, and compliance (GRC) programs. This role provides strategic guidance on federal cybersecurity policies, emerging regulations, executive directives, and security frameworks while ensuring alignment between cybersecurity initiatives and organizational business objectives.
The ideal candidate possesses extensive experience advising Chief Information Security Officers (CISOs) and senior executives, interpreting Executive Orders and federal cybersecurity mandates, and translating complex regulatory requirements into practical governance, security, and compliance strategies. This individual will play a key role in advancing Zero Trust initiatives, continuous monitoring capabilities, AI governance, and enterprise risk management across the organization.
Compensation & Benefits
Competitive salary
Employer-paid health insurance premiums (medical, dental, vision)
Employer-paid short/long term disability insurance and basic life/AD&D insurance
401K with a 4% employer contribution
Professional development reimbursement options available (training, certification, education, etc)
Flexible and remote work policies for most positions
Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually
11 paid holidays per calendar year
We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.
SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.